Study finds a few best practices that can have a big impact on threat protection